The WAF Detector is an advanced tool designed for detecting and testing the effectiveness of Web Application Firewalls (WAFs) and Content Delivery Networks (CDNs). It offers features like single and batch URL detection, live payload testing, and comprehensive security validation using various attack patterns and evasion techniques. Users must ensure they have explicit authorization before testing any web services.
The project provides tools in Go for automated testing against Fastly's WAF simulator, incorporating a CI/CD pipeline with GitHub actions to run tests on code changes. Test cases are structured in YAML format within the test/rules directory, detailing various fields such as identifiers, requests, expected responses, and signals. Users must set up their Fastly NGWAF credentials, run Terraform commands, and check workflow statuses on GitHub to ensure the WAF rules function correctly.